Introduced a new Prisma Postgres CLI group with a link command and added streaming schema parsing for extremely large files.
Prisma changelog digest
Mar 23 - Mar 29, 2026. Useful releases, risky migrations, and noisy updates from the Prisma channel.
No matching updates in this bucket.
Prisma updates in 2026-w13
Wrapped SNICallback in try/catch and added timing‑safe HMAC/KMAC comparisons, null‑prototype header objects, and permission checks for pipe, realpath.native, and fs/promises to address several high‑severity CVEs
Fix multiple high‑ and medium‑severity CVEs (e.g., null‑prototype headers, SNICallback try/catch, array index hash collision, timing‑safe crypto comparisons, NGHTTP2 flow‑control handling, URL format crash, permission checks for fs.promi...
Wrap SNICallback invocation in a try/catch to mitigate crashes (CVE‑2026‑21637).
Fixed multiple CVE‑related vulnerabilities including array index hash collisions, timing‑side‑channel issues in Web Crypto HMAC/KMAC, and unsafe header prototypes
Fixed issues query for TypeScript 6.0 across beta, RC, and stable releases.